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DETAILED ACTION 

Examiner 's Statement of Reasons for Allowance 

1. Claims 1, 3-14, 16, 18, 23, 25-36, 38, 40, 45, 47-58, 60, 62 and 67-108 are 
allowed over prior art. 

2. This action is in reply to applicant's correspondence of 07 August 2006. 

3. The following is an examiner's statement of reasons for the indication of 
allowable claimed subject matter. 

4. The terminal disclaimer filed on 2/12/2007 disclaiming the terminal portion of 
any patent granted on this application which would extend beyond the expiration date of 
U.S. Patent 6,215,877 Bl has been reviewed and is accepted. The terminal disclaimer 
has been recorded. 

5. As per claims 1, 23, 45, 67, 72, 77, 82, 91 and 100 generally, prior art of record, 
Matsumoto, U.S. Patent 6,215,877 Bl and Boneh, D. et al, "A revocable backup system", 
USENIX security Conference, pp. 91-96, 1996, fails to teach alone, or in combination, at 
the time of the invention, the features as discussed and remarked upon in the response of 
07 August 2006 to office action of 2/12/2007. 

Specifically, (as per claim 1 , for example) prior art dealing with distributed 

security policy/key/token/certificate management via client server architectures utilizing 

authentication support of file/web resource authorization/access control (i.e., applications 

involving arbitrarily complex authorization delegation utilizing 'pieces' of security policy 

distributed across arbitrary [network] hosts; Bauer, L, et al, *A General and Flexible Access- 
Control System for the Web', 8/2002, Proceedings of the 1 1th USENIX Security Symposium, entire 
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document, http://www.ecexmu.edu/-lbauer/papers/webauth-sec02.pdf), is generally known per se. 
Nowhere in the prior art is found collectively the italicized claim elements (i.e., managed 
message access via associated message identifier/keys utilizing policy based encoded 
content/keys accessed/decoded upon request/response across a multiple node network, 
with the content node specifically decoupled at decoding), at the time of the invention, 
serving to patently distinguish the invention from said prior art; 



1 . A method for managing access to messages in a network, the method comprising 



the computer-implemented steps of: 

receiving, from a first node in the network, 
a request for 



both 



a message identifier that 

uniquely identifies the message and 
a key that may be used 

to encode the message; 



generating, in response to receiving the request, 



both 



the message identifier and 
the key; 



providing 
both 



the message identifier and 
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the key to the first node 
to allow the message to be 
encoded with the key 

to generate an encoded message; 
receiving, from a second node in the network, 

a request for the key ; 
providing the key to the second node 
to allow 

the encoded message to be 

decoded and 
the message to be 

retrieved using the key ; and 

* 

managing access to the key based upon 

key policy criteria ; 
receiving and storing one or more encoded messages 

at the second node; 
requesting, receiving, and storing at the second node, one or more keys, 

wherein each of the keys is associated with 
one of the encoded messages 

that are stored at the second node; 
decoupling the second node 

from the network; and 
decoding the encoded messages 
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based on the keys." 



6. Dependent claims 3-14, 16, 18, 25-36, 38, 40, 47-58, 60, 62, 68-71, 73-76, 78-81, 
83-90, 92-99 and 101-108 are allowable by virtue of their dependencies. 



\ 



» 
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Conclusion 



7. Any inquiry concerning this communication or earlier communications from 
examiner should be directed to Ronald Baum, whose telephone number is (571) 272- 
3861, and whose unofficial Fax number is (571) 273-3861 and unofficial email is 
Ronald.baum@uspto.gov. The examiner can normally be reached Monday through 
Thursday from 8:00 AM to 5:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami, can be reached at (571) 272-4195. The Fax number for the 
organization where this application is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. For 
more information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http : // pair-direct. uspto . go v . Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 
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